diff --git a/2007/2xxx/CVE-2007-2728.json b/2007/2xxx/CVE-2007-2728.json
index 87b54587426..752b49cfc4e 100644
--- a/2007/2xxx/CVE-2007-2728.json
+++ b/2007/2xxx/CVE-2007-2728.json
@@ -34,7 +34,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727."
+                "value": "** DISPUTED ** The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue."
             }
         ]
     },